CVE-2020-7453

Published: Apr 29, 2020Modified: Nov 21, 2024

6.0

Vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N

Exploitability: 0.8 / Impact: 5.2

Source: NVD

Description

In FreeBSD 12.1-STABLE before r359021, 12.1-RELEASE before 12.1-RELEASE-p3, 11.3-STABLE before r359020, and 11.3-RELEASE before 11.3-RELEASE-p7, a missing null termination check in the jail_set configuration option "osrelease" may return more bytes with a subsequent jail_get system call allowing a malicious jail superuser with permission to create nested jails to read kernel memory.

Affected (10)

Products: Freebsd: Freebsd

Freebsd

1 product

Freebsd

Configuration A

10 vulnerable

Vulnerable Software	Affected Versions
Freebsd Freebsd	Version 11.3
Freebsd Freebsd	Version 11.3 p1
Freebsd Freebsd	Version 11.3 p2
Freebsd Freebsd	Version 11.3 p3
Freebsd Freebsd	Version 11.3 p4
Freebsd Freebsd	Version 11.3 p5
Freebsd Freebsd	Version 11.3 p6
Freebsd Freebsd	Version 12.1
Freebsd Freebsd	Version 12.1 p1
Freebsd Freebsd	Version 12.1 p2

Related CWEs

CWE-754

Improper Check for Unusual or Exceptional Conditions

The product does not check or incorrectly checks for unusual or exceptional conditions that are not expected to occur frequently during day to day operation of the product.

References (2)

https://security.FreeBSD.org/advisories/FreeBSD-SA-20:08.jail.asc

Source: secteam@freebsd.org

PatchVendor Advisory

https://security.FreeBSD.org/advisories/FreeBSD-SA-20:08.jail.asc

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

Timeline

No history available yet.